RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) (RHSA-2022:8873)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8873 advisory. The OpenStack Oslo Utility library. Security Fixes: incorrect password masking in debug output CVE-2022-0718 For more details about the security...

CVE-2023-21849

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: Java utils. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA...

Design/Logic Flaw

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: Java utils. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA...

CVE-2023-21849

CVE-2023-21849 affects Oracle E-Business Suite, Oracle Applications DBA (Java utils) versions 12.2.3–12.2.12. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA, enabling unauthorized creation, deletion or modification of data a...

Path Traversal

github.com/whyrusleeping/tar-utils is vulnerable to Path Traversal. The vulnerability exists because the elems parameter in the Sanitize function of extractor.go does not properly sanitize the relative file paths, allowing an attacker to write arbitrary files outside the expected directory...

Malicious code in bsd-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e880f286613f79c0c5732a852f51b1e15404639f15d408cb689481cf5ef5df64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Huawei EulerOS: Security Advisory for nfs-utils (EulerOS-SA-2023-1076)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

globalpom-utils has Insecure Temporary File

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

GHSA-JJVP-WFP8-RV69 globalpom-utils has Insecure Temporary File

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

CVE-2018-25068

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

Design/Logic Flaw

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

CVE-2018-25068 devent globalpom-utils FileResourceManagerProvider.java createTmpDir temp file

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

CVE-2018-25068 devent globalpom-utils FileResourceManagerProvider.java createTmpDir temp file

A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...

CVE-2018-25068

The CVE-2018-25068 case affects devent globalpom-utils up to v4.5.0, where the createTmpDir function in FileResourceManagerProvider.java can create insecure temporary files. The vulnerability, exploitable remotely, is addressed by upgrading to v4.5.1 (patch: 77a820bac2f68e662ce261ecb050c643bd7ee5...

CVE-2015-10016

A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...

Sql injection

A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...

CVE-2015-10016

CVE-2015-10016 affects jeff-kelley opensim-utils. The vulnerability is a SQL injection in the DatabaseForRegion function of regionscrits.php caused by directly manipulating the region argument. Impact is described as potentially high for confidentiality, integrity, and availability. A patch is id...

CVE-2015-10016 jeff-kelley opensim-utils regionscrits.php DatabaseForRegion sql injection

A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...

CVE-2015-10016 jeff-kelley opensim-utils regionscrits.php DatabaseForRegion sql injection

A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...

opensim-utils SQL注入漏洞

opensim-utils is a collection of PHP utilities for opensimulator. A SQL injection vulnerability exists in opensim-utils that stems from manipulation of the parameter region resulting in sql injection...